Today Drupal released a fix to a severe vulnerability. Be sure to patch as soon as possible as the bad guys are already working on reverse engineering the patch to discover the details of the vulnerability. If history is repeated, they will have an exploit available within hours.
Enterprises should have agreements with software providers to obtain actionable information regarding vulnerabilities in a timely fashion. The logical conclusion to that is that enterprises should also have policies and procedures in place to provide a guide as to how to deal with that information in a timely manner.
Keywords: CyberSecurityRecap drupal patch update fix severe vulnerability
troyf<at>CyberSecurityRecap.com